Role Purpose

Responsible for day-to-day administration of the Microsoft 365 environment and the organization's core security tooling, including email security, endpoint/network security and firewall platforms. Acts as the operational bridge between cloud platform management and security oversight. The Cloud & Security Engineer will have a dotted line reporting to the Cybersecurity Lead, and report directly to the Head of IT Operations

Key Responsibilities

Cloud / M365 administration

• Administer Microsoft 365 tenant: user accounts, licensing, Exchange Online, SharePoint, Teams, OneDrive, Purview
• Manage Intune device enrollment, compliance policies, and endpoint configuration
• Maintain Conditional Access policies, MFA enforcement, and identity governance settings
• Monitor tenant health, service incidents, and licensing utilization

Firewall administration

• Day to day management of firewall configuration/fine-tuning of firewall rules

Patch management

• Owns patch management process on company’s assets (servers, databases or applications)
• Assesses impact of patches, performs testing and rollout patching across the company’s environment
• Guides junior staff in patching of assets

Support on security tooling administration

• Administer email gateway: email security policies, anti-phishing/spam filtering, archiving, and threat remediation
• Administer EDR): agent deployment, policy tuning, threat detection, and response actions (alert triage, containment of threat)
• Support in monitoring security alerts from Microsoft Defender, Entra ID and other security platforms
• Keep security tool configurations and licensing up to date across all platforms

Security support

• Support vulnerability management: patching coordination, scan reviews, remediation tracking
• Assist with security incident response along with the Cybersecurity Lead
• Maintain documentation for security configurations, access reviews, and audit evidence
• Support DLP, information protection, and email security configurations (e.g. anti-phishing, SPF/DKIM/DMARC)

Required Skills / Experience

• 4+ years in M365 administration or systems administration
• Working knowledge of core security concepts (identity and access management, endpoint protection, network security)
• Hands-on experience with email security, endpoint security, firewalling and security monitoring preferred
• Microsoft certifications required
• Experience in a regulated industry (financial services, professional services) a plus